Binance reports $6.3 billion incident as investigation and loss accounting remain unclear
Binance says $6.3 billion was affected and suspended withdrawals; TRM Labs attributes the operation to North Korea-linked TraderTraitor. Fake developer-recruitment lures and a separate Sophos compromise involving a malicious VS Code workspace underscore developer-environment risks, but the Binance intrusion path, actual losses, and recovery remain unconfirmed.
Sources (2)
Updated Nov 5, 2026